Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: YNuVHCN0IqoAdrs8BJwWjW9gb1F+j2GCnU5l4O7pLQk=
Subject key identifier: A4:24:23:BF:F9:A1:9F:05:F6:C4:C2:9E:81:0D:C8:BF:8E:3E:74:60
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 019753EB928BB6190D4965068C5FE79D0896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 03C8
Signing time: Mon 09 Jun 2025 09:00:36 +0000
Manifest this update: Mon 09 Jun 2025 09:00:36 +0000
Manifest next update: Tue 10 Jun 2025 09:00:36 +0000
Files and hashes: 1: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: Q0F/JdgdiKvoUIWsC88R79DkUQj13u6SsZsBRg7Tty4=)
2: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (hash: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:92:8b:b6:19:0d:49:65:06:8c:5f:e7:9d:08:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Jun 9 09:00:36 2025 GMT
Not After : Jun 10 09:00:36 2025 GMT
Subject: CN=a42423bff9a19f05f6c4c29e810dc8bf8e3e7460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:ac:64:77:0e:87:33:96:87:b3:2b:1e:4b:
35:e8:0b:2b:90:e7:da:42:ff:64:ac:97:c8:a2:b4:
e2:b0:d5:ad:f5:8b:d1:f1:80:17:5f:82:e6:b9:2c:
0c:f6:28:3a:05:5c:e4:c9:e6:bd:63:7a:45:f9:1b:
1f:9d:14:3d:05:01:4f:ef:c2:2b:12:fd:57:9d:3a:
da:aa:03:97:60:93:25:a1:cf:14:4c:ff:32:1e:71:
f6:61:bb:e1:45:a6:1e:d7:e6:fd:2a:02:36:d0:e8:
32:b6:32:01:4f:f0:e9:13:18:26:aa:5a:d5:56:2e:
73:c4:ce:df:94:27:74:ef:06:5a:01:6a:c3:5a:45:
84:c7:48:ea:70:3c:f3:e6:95:89:12:76:6c:66:6b:
c5:d4:78:3d:80:a8:ff:24:7e:fd:60:6a:c2:ca:18:
4f:ec:33:e7:9b:3c:59:ba:8c:31:7e:8e:96:80:51:
38:22:66:f0:ce:f3:4c:ab:fa:c9:57:ae:b7:ec:c2:
f2:74:05:06:e0:00:4d:55:8d:55:1f:16:5f:9f:6b:
65:16:a4:6b:ab:b0:5e:ea:73:fb:1e:4f:fd:e5:4a:
40:eb:ab:03:6b:be:c3:4d:51:e2:cb:e5:aa:a6:2b:
bf:3d:db:22:9e:a6:f1:a4:05:14:b3:b1:17:d0:59:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:24:23:BF:F9:A1:9F:05:F6:C4:C2:9E:81:0D:C8:BF:8E:3E:74:60
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:30:d5:97:75:59:13:66:e3:94:7d:f9:ad:b0:f4:bd:eb:71:
e7:6e:06:0e:6c:db:4c:4c:5e:c0:25:04:67:78:34:94:af:aa:
05:6d:59:41:a6:8e:2d:eb:13:27:30:c7:94:9e:d5:e9:8c:2b:
cd:0c:25:1e:85:03:7f:99:aa:4a:25:af:da:06:29:ed:f7:37:
d1:5d:e5:8d:57:04:30:ea:57:81:b2:a6:e8:e9:12:a1:b3:e1:
6a:3c:f3:ff:a8:52:84:c3:ad:9a:b2:5c:e9:49:cf:7a:65:7d:
8c:e4:9f:be:c5:7b:f8:8e:e8:12:6a:04:1b:cd:b7:4e:5e:aa:
89:97:82:ca:f4:02:32:fd:8f:22:77:33:2a:53:5e:dd:0f:97:
cb:93:95:e7:06:dc:cb:b5:84:4a:24:b8:0b:29:58:e2:cd:fa:
b7:25:cd:e2:9b:f6:6e:da:d2:c7:66:de:df:0f:f3:7a:da:88:
d2:39:8f:6a:a0:dd:6f:6c:93:ef:5e:14:fd:f2:23:9b:77:2c:
7c:a7:de:d9:f7:5b:3b:e4:60:7e:2b:9e:8c:ea:53:38:e6:19:
61:b0:dc:24:cc:b9:64:ba:e9:59:85:34:ef:75:75:17:77:ba:
29:06:e0:80:4c:db:20:90:bd:91:1d:76:de:0d:16:fd:55:21:
ba:c6:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:32 2025 by rpki-client